I have been running several LAMP servers for 5+ years with Let's Encrypt certs.
Today, I did the SSL test by Qualys https://www.ssllabs.com/ssltest/index.html to learn that I had lost my coveted A+ because the ever-evolving cipher-suites list had changed and now I had weak cipher suites in use. Searching the internet will bring you to myriad websites, each with differing answers based on age. I love the simplicity of
SSLCipherSuite HIGH:!aNULL:!MD5, this setting results in more weak ciphers, not less. Before I go the trial-and-error process of testing each one in isolation, is there a better way?
- Is there key word like
HIGH:!aNULL:!MD5that will stand in for the best and strongest ciphers? And work long-term?
- Or is there a website that
is currentlystays updated with the latest and greatest SSLCipherSuite recommendation?
PS Here is the list that months ago resulted in an A+